Author Topic: 007 spy software  (Read 8053 times)

0 Members and 1 Guest are viewing this topic.

wardjus1

  • Guest
007 spy software
« on: November 18, 2008, 11:03:49 PM »
I have a problem...

Recently we switched from Norton to Avast.

My problem is that Avast moved my 007 Spy Software to the Virus Chest.
When I try and open the program (which used to open on it's own)
it says "Windows can not access the specified device, path, or file.  You may not have the appropriate permissions to access the item"

Avast says that the file is infected with a Wrm.

In the past with other antivirus software I have had to exclude this program.

My problem is that I have attempted to restore and exclude this program from the
search. And I am still getting the Windows can not access.... message.

What am I doing wrong?
Can I restore my program?
It is still in the folder where it should be.

Thanks!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: 007 spy software
« Reply #1 on: November 18, 2008, 11:07:19 PM »
Maybe you need to disable Hide protected operating system files and enable View hidden files and folders to manage the file(s).

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the 'a' blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button...
You can use wildcards like * and ?. But be careful, you should 'exclude' that many files that let your system in danger.

After that, boot and try to restore the file that is into Chest.

Also, I do recommend:

1) Remove NAV or Norton 360 through Add/Remove programs from Control Panel. Boot.
2) Use Norton Removal Tool for Windows 2000/XP/Vista or Norton Removal Tool for Windows 98/Me. Boot.
3) Install avast! (or repair the installation) and boot.

The Norton Removal Tool uninstalls all Norton 2008/2007/2006/2005/2004/2003 products and Norton 360 from your computer.
The best things in life are free.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: 007 spy software
« Reply #2 on: November 19, 2008, 12:15:55 AM »
Maybe you should read the following before allowing that software to run:
http://www.kephyr.com/spywarescanner/library/007spysoftware/index.phtml
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: 007 spy software
« Reply #3 on: November 19, 2008, 12:33:14 AM »
Until you mentioned it in this topic I have never heard of 007 spy software, I tend to steer clear of the unknown or exotic. Now I know it is meant to be an invisible keylogger, not so invisible that avast doesn't find it and believe it is malware (on to that later).

As for getting the error I'm not surprised, if you sent it to the chest, etc. it wouldn't be in the original location so windows wouldn't find it or could it be down to the protection of 007 spy blocking access to its file/folder ???

Don't forget avast doesn't do anything autonomously it scan and alerts to infected files, you choose the action from the list of options.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?  
Check the avast! Log Viewer (C:\Program Files\Alwil Software\Avast4\ashLogV.exe), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

Clue, the full path and file name are what you need to enter into both exclusions lists to get the program to work.
add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions (right click the avast ' a ' icon)

####
You should check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive, e.g. C:\Suspect. Now exclude that folder in the Standard Shield, Customize, Advanced, Add, type (or copy and paste) C:\Suspect\* That will stop the standard shield scanning any file you put in that folder. You should now be able to export any file in the chest to this folder and upload it to VirusTotal without avast alerting.

If it is indeed a false positive, see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: 007 spy software
« Reply #4 on: November 19, 2008, 02:16:00 AM »
The best things in life are free.

CharleyO

  • Guest
Re: 007 spy software
« Reply #5 on: November 19, 2008, 08:44:13 AM »
***

I do not think this is a program you would want on your computer. From this ScanDoo/google search ...

http://g.s.scandoo.com/search?hl=en&meta=on&q=007+spy+software ... click the image below to enlarge.


***

wardjus1

  • Guest
Re: 007 spy software
« Reply #6 on: November 22, 2008, 05:13:43 PM »
Thanks for the info on 007...

I actually bought it about 4 years ago.
It works great for the purpose I bought it.

I didn't have the file excluded properly.
I did have to re download it as one of it's log
files was missing and it had an error.

http://www.virustotal.com/analisis/62eeee6710f55c016682fa2984978757

Thanks!


Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: 007 spy software
« Reply #7 on: November 22, 2008, 05:32:37 PM »
For me that would be conclusive, there is enough suspicion surrounding it for me to get rid of it.

It isn't unusual to not have avast detect on VirusTotal when it does so on your system. VT isn't able to update the VPS in real time as the user is and this is often the cause. Remember the point of submitting it to VT is to see what the other scanners find. So that would also another detection to the others.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: 007 spy software
« Reply #8 on: November 22, 2008, 05:33:53 PM »
wardjus1, as you can see, other antivirus complain about it also.
avast on virus total is not as update as in your computer.
The best things in life are free.